Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
File: YmINYNuoUorqQhLM7bcpYTqZFVw.cer (raw, json)
Hash identifier: 3sEbHuSh1x8c/FztMItNjbmOBCDqfQ/+Nrwl3cM4Uq8=
Subject key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4330
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Oct 2023 13:16:21 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 194.127.104.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 May 2024 17:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17200 (0x4330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 11 13:16:21 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:cd:3d:50:09:1e:5f:29:a9:71:f5:19:8d:
fb:37:52:f2:88:3b:19:30:5a:c4:b5:be:c2:85:b2:
25:6f:25:f9:5c:32:ea:8a:ab:ff:f3:9b:de:8a:93:
8f:98:78:c8:8c:67:39:a3:33:73:b1:6b:b1:6c:26:
e8:7c:38:6c:37:f2:72:4d:da:af:c2:91:70:68:d5:
4a:2f:1b:ff:98:ae:e2:bb:50:79:0f:cd:44:d5:f7:
d8:9c:7a:61:ea:ab:01:5a:49:d1:c7:88:3e:0f:74:
4b:02:c1:92:f4:3d:a5:f5:74:ba:b7:df:22:ed:9d:
f8:db:6f:91:42:14:46:9e:4d:d3:39:0b:7d:f4:05:
8d:2d:2d:2c:56:e5:61:3f:34:17:bf:3b:83:06:f5:
d7:85:9b:4f:95:03:18:90:07:e9:6c:66:f2:02:dd:
35:db:f7:f8:fa:18:d2:3e:81:98:9c:1a:23:c7:83:
84:df:d7:06:a0:b7:7e:53:3c:09:cd:d7:c1:64:6b:
67:8e:d1:06:31:56:68:f1:22:aa:4c:2e:76:4a:0d:
7d:42:23:89:40:58:e9:27:4e:a4:90:fc:66:e6:41:
2d:57:3a:e0:b9:64:c5:be:ab:2e:7c:38:c5:8f:13:
49:65:d4:5f:2d:c5:b7:d4:22:a6:0b:a9:a5:47:a2:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
194.127.104.0/23
Signature Algorithm: sha256WithRSAEncryption
76:91:2e:83:3a:b6:59:ce:00:10:e1:06:f1:bd:85:77:16:ed:
02:c3:5e:2d:10:7f:d3:71:9e:85:3b:76:df:42:b5:54:f3:d3:
21:ae:28:7e:84:96:b6:5e:1b:57:66:89:c2:63:74:35:38:3b:
9a:54:f3:9b:0f:ac:f0:2c:51:cd:80:4d:1c:98:57:06:6b:ce:
9b:a6:62:4a:8e:14:e0:56:36:81:62:81:5f:6d:22:0c:c5:2c:
5c:fd:6f:80:bc:54:47:a9:09:0f:28:d4:5f:91:8d:a0:62:7e:
ef:6d:91:01:41:0d:de:1b:1d:8b:a6:d3:32:f8:fd:5e:ce:17:
a7:b6:31:df:9d:56:9b:b1:b5:e9:7f:7b:28:b8:9d:17:91:61:
4b:c9:12:ee:ff:e1:19:49:b8:52:8d:08:75:c1:a0:19:e1:bf:
4d:98:8a:6f:f7:c0:75:67:5a:79:49:56:c4:97:bf:3f:e3:22:
b9:ff:fc:e4:e7:af:84:34:99:8b:d3:58:22:3a:83:0c:f4:d9:
6b:c2:1e:a2:99:f1:c6:ad:86:7a:3e:4d:c4:13:46:10:d3:65:
8d:94:28:62:38:ca:9d:48:11:bc:e9:10:ba:24:11:d2:d9:88:
9f:87:29:19:3b:ba:43:61:c3:be:61:e5:ae:20:7c:b0:7b:3e:
63:4a:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:34:17 2024 by rpki-client on console-fra.rpki-client.org